Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
File:                     8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft (raw, json)
Hash identifier:          yYvEIMTBMQXwyQVm8Hn2J7ky/mRNCHdVTbKRjM3m5Rk=
Subject key identifier:   0D:56:0B:4C:D7:1B:BB:D6:BD:8F:80:58:59:D0:54:68:23:17:69:83
Authority key identifier: F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
Certificate issuer:       /CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Certificate serial:       01962F3D925E5B16AE627EA0E77B7368D6A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
Manifest number:          14F8
Signing time:             Sun 13 Apr 2025 13:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:26 +0000
Files and hashes:         1: 5oRCpfT1T6yQCJqx4kRnu1PISqE.roa (hash: EyMBU9wS84YvIBo5Y3Ut08o1N5LKBsYGCi0/aBrkiC4=)
                          2: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl (hash: sU9lmtj4/m+cySsk1f//PMUVFXo44/CSON4Ak8I+Dxg=)
                          3: OnZ1oDUkGHXt8p5LFZr7iXHIj2U.roa (hash: /DcdW9UyVs0Pozfbw9Y31s/RNRP7VGPFkHtsuWsMDGA=)
                          4: ae03YOkS1ofM34wdhj2KqmDyBno.roa (hash: urHsIcZ4xBvpG+piPTKwb+t4LjinRiEgOkguvBfEZMw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:92:5e:5b:16:ae:62:7e:a0:e7:7b:73:68:d6:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
        Validity
            Not Before: Apr 13 13:01:26 2025 GMT
            Not After : Apr 14 13:01:26 2025 GMT
        Subject: CN=0d560b4cd71bbbd6bd8f805859d0546823176983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:44:04:a1:6f:08:c6:77:2c:5f:9b:a5:e5:c7:
                    85:9e:a3:2f:d2:58:3f:ea:36:5b:c1:4d:d8:54:ea:
                    da:84:50:63:99:36:e6:b8:63:a2:fc:20:4b:85:ed:
                    a2:02:16:cb:c3:28:7c:08:b9:17:3a:77:a6:5c:31:
                    78:ac:d4:15:60:55:36:2e:df:c1:31:37:5d:bd:98:
                    e0:2d:35:40:e0:b7:26:f4:52:9a:89:2c:d6:b9:f6:
                    fb:fa:21:b9:0e:0d:3c:1c:94:05:42:91:63:79:1a:
                    cd:c1:f9:08:f8:50:83:80:53:c7:e4:ba:91:29:27:
                    15:22:77:18:66:38:7e:bb:0e:5b:5a:af:7c:69:18:
                    92:cc:6b:94:99:7d:16:57:8e:d1:2e:f1:b1:1b:fe:
                    09:70:c8:99:75:78:49:52:1f:dd:59:2d:1f:99:9c:
                    a0:e6:61:ab:82:d0:7d:b5:b3:d1:94:31:9b:f6:d8:
                    5d:0e:3c:68:14:a1:47:08:ef:5b:a4:c8:ce:d6:52:
                    14:01:3a:6f:f7:ac:f5:d7:d7:86:51:c6:a0:c1:cd:
                    8f:6c:ab:88:09:9b:f7:7d:9b:6a:6f:ec:91:bf:c7:
                    5c:9f:91:ac:5b:34:be:a9:5b:35:5c:64:a0:e0:11:
                    85:a5:79:76:03:0e:04:34:d6:e4:63:49:b6:26:e6:
                    37:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:56:0B:4C:D7:1B:BB:D6:BD:8F:80:58:59:D0:54:68:23:17:69:83
            X509v3 Authority Key Identifier:
                keyid:F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:54:a3:c6:90:2d:81:08:27:62:9a:ce:b0:3a:5b:d6:41:d5:
         b3:ae:da:0a:6b:42:cf:56:6f:53:12:1f:21:5f:ed:2e:45:5a:
         aa:34:ed:03:97:b4:23:72:4a:1a:b5:3b:6d:8e:f3:ea:cf:37:
         77:09:67:8e:7b:27:36:95:93:0e:f4:64:2b:3c:c1:3d:2d:7c:
         96:37:36:c1:89:f2:47:81:b7:71:fb:52:d0:31:bb:11:72:b7:
         d2:a0:bd:b0:f2:70:20:39:3e:e9:b1:63:e8:31:df:7a:64:f3:
         7e:fe:9a:fc:93:5e:23:bb:d1:e4:ef:ee:f4:5f:7a:5f:6b:e9:
         a8:b7:97:9e:d4:af:de:e9:98:0b:0b:c5:62:d4:9a:2a:a3:13:
         c8:e2:fc:8f:6b:fa:34:a9:7b:45:d4:41:32:1f:a3:ad:cc:ad:
         24:bc:db:b4:29:ad:6c:a9:e0:73:7e:a9:e8:9d:0e:d4:1e:01:
         8f:eb:6a:c5:3d:51:ec:01:96:93:e0:23:42:53:31:c9:1c:c3:
         33:3f:8a:16:44:12:9c:a5:2f:eb:9e:5c:51:20:d4:4c:10:3f:
         dd:ac:c9:22:bb:e2:b7:ba:6e:6a:ab:67:9a:d6:d2:69:34:1b:
         3b:87:2d:3a:bf:6a:0f:4c:2c:59:1b:68:7e:d4:7b:43:5c:2e:
         cd:13:92:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPZJeWxauYn6g53tzaNalMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZjE0ZWQxMjRmOWEyZjNkZWFiMTAwNmYxODRjZjRmYjgw
YTNhZWMwHhcNMjUwNDEzMTMwMTI2WhcNMjUwNDE0MTMwMTI2WjAzMTEwLwYDVQQD
EygwZDU2MGI0Y2Q3MWJiYmQ2YmQ4ZjgwNTg1OWQwNTQ2ODIzMTc2OTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEQEoW8IxncsX5ul5ceFnqMv0lg/
6jZbwU3YVOrahFBjmTbmuGOi/CBLhe2iAhbLwyh8CLkXOnemXDF4rNQVYFU2Lt/B
MTddvZjgLTVA4Lcm9FKaiSzWufb7+iG5Dg08HJQFQpFjeRrNwfkI+FCDgFPH5LqR
KScVIncYZjh+uw5bWq98aRiSzGuUmX0WV47RLvGxG/4JcMiZdXhJUh/dWS0fmZyg
5mGrgtB9tbPRlDGb9thdDjxoFKFHCO9bpMjO1lIUATpv96z119eGUcagwc2PbKuI
CZv3fZtqb+yRv8dcn5GsWzS+qVs1XGSg4BGFpXl2Aw4ENNbkY0m2JuY3PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1WC0zXG7vWvY+AWFnQVGgjF2mDMB8GA1UdIwQY
MBaAFPDxTtEk+aLz3qsQBvGEz0+4CjrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBGTzBTVDVvdlBlcXhBRzhZVFBUN2dLT3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jNzljZjMtYTA3MC00ZDViLTllZTQt
NDM2MTJlN2Q5Y2MxLzEvOFBGTzBTVDVvdlBlcXhBRzhZVFBUN2dLT3V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9jNzljZjMtYTA3MC00ZDViLTllZTQtNDM2MTJlN2Q5Y2Mx
LzEvOFBGTzBTVDVvdlBlcXhBRzhZVFBUN2dLT3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1SjxpAt
gQgnYprOsDpb1kHVs67aCmtCz1ZvUxIfIV/tLkVaqjTtA5e0I3JKGrU7bY7z6s83
dwlnjnsnNpWTDvRkKzzBPS18ljc2wYnyR4G3cftS0DG7EXK30qC9sPJwIDk+6bFj
6DHfemTzfv6a/JNeI7vR5O/u9F96X2vpqLeXntSv3umYCwvFYtSaKqMTyOL8j2v6
NKl7RdRBMh+jrcytJLzbtCmtbKngc36p6J0O1B4Bj+tqxT1R7AGWk+AjQlMxyRzD
Mz+KFkQSnKUv655cUSDUTBA/3azJIrvit7puaqtnmtbSaTQbO4ctOr9qD0wsWRto
ftR7Q1wuzROSlA==
-----END CERTIFICATE-----